Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Is it possible to set up a DD-WRT router as a repeater or client bridge without having access to the gateway you are trying to repeat/bridge?

share|improve this question

migrated from serverfault.com Oct 28 '11 at 23:37

This question came from our site for professional system and network administrators.

    
Can you clarify what it is you are trying to do. By "repeater or client bridge" do you mean it should bridge wireless clients and act as a range extender? –  David Schwartz Oct 28 '11 at 22:33
    
yeah, I guess simply put, a range extender –  LordZardeck Oct 28 '11 at 23:07
    
Unfortunately, that's not possible without cooperation from the other access point. The security scheme used by WiFi causes an access point to reject packets whose origin hardware address is not one of its clients unless a protocol like WDS is used, and WDS would have to be configured into the router. You can use two routers back-to-back to create a new WiFi network bridged to the original one. –  David Schwartz Oct 28 '11 at 23:13
    
I believe that DD-WRT can do this, because my friend used it to steal^H^H^H^H^Hborrow his neighbours unsecured WiFi –  Mark Henderson Oct 28 '11 at 23:38
    
@Farseeker: Sure, you can use it to link wired clients into someone else's WiFi. And you can use two back-to-back to create a new wireless network bridged to the existing one. –  David Schwartz Oct 28 '11 at 23:41

2 Answers 2

up vote 3 down vote accepted

No. You can create your own WiFi that's routed to the existing WiFi. You can bridge wired clients to the existing WiFi. But bridging wireless clients will not work.

We tend to think of WiFi as working just like wired Ethernet. But unfortunately, it's really not. It has its own rules and this is one case where it's just different.

The short version of the problem is this: An access point will not accept packets with origin hardware addresses that are not paired with the access point. Since some clients won't be able to reach the existing WiFi network, they won't pair with it, and those access point will reject bridged/repeated packets from them.

What might work, and I stress might, is two bridges back-to-back, connected by wired Ethernet. The specifications say it shouldn't work, but in practice it seems to. Apparently, while the WiFi hardware isn't capable of proxy registration, the DD-WRT software is. Bridging from wired to wireless is done in software in these routers, and DD-WRT is smart enough to proxy register a software-bridged packet. (It knows it has to do the WiFi magic on behalf of its wired clients, since they obviously won't be able to do it themselves.)

For this setup, you connect two wireless routers, LAN-to-LAN. You configure the WiFi on one as a station on the existing WiFi. You configure the WiFi on the other as an access point on a new network. You will probalby need to use a different SSID though, so people will specifically have to choose to connect to your network.

Theoretically, you could use the same SSID and encryption, if any. This would allow clients to automatically connect to the strongest network. You will have two issues. First, you have to make sure your two routers don't connect to each other wirelessly. That obviously won't work. Second, clients will typically show a temporary disruption of service when they switch to and from your access point because the existing network won't know where to find them. MAC learning takes up to a minute. You might get complaints if you 'steal' people who momentarily came into range of your access point and experienced service disruptions as they switch to and from it.

Update: The way back-to-back bridges work is by a form of NAT. The bridge doesn't proxy register its clients but instead re-writes their source hardware addresses.

share|improve this answer
    
Actually, you can Bridge wirelessly. I am using it right now. I didn't even have access to the router. It was a unsecured linksys router running the default firmware. I have also done it at home on my 2WIRE secured router. But for some reason, using the same steps that worked at home and on the unsecured router, I cannot get it to work at the library. I must have a setting wrong somwhere, but I can't find out what exactly. Could a firewall setting prevent it? –  LordZardeck Nov 1 '11 at 19:56
    
It's sort of a firewall, but it's part of the hardware implementation of an access point. Unless WDS or the like is enabled, any packets with source hardware addresses not paired with the AP are dropped. It's part of 802.11. If you got it working, something is probably pairing those MACs with the AP. (Perhaps you found a rare router that uses software bridging for wireless-to-wireless? Perhaps you are internally using two radios? Hard to be sure. It's not supposed to work, but it sometimes does.) –  David Schwartz Nov 1 '11 at 20:28

The Repeater Bridge mode does what you're looking for, without access to the configuration of the gateway you're trying to repeat. All you need is the SSID and security key of the source network, and follow the instructions (precisely). Especially make sure that the DD-WRT repeater uses the same channel as the gateway to be repeated.

There's one caveat: the gateway to be repeated needs to use a static wi-fi channel. If it's set to change its channel automatically, you'll have to reconfigure the DD-WRT every time the channel changes.

For example when repeating wi-fi network "MyNetwork" with WPA2 key "secret" on channel 6 from a gateway, the configuration of the DD-WRT should essentially be this:

  • Set channel to 6, use wireless mode: Repeater Bridge, SSID "MyNetwork", security WPA2 with key "secret"
  • Virtual access point (optionally), SSID "MyVap", security WPA2 with key "myVapKey"
  • Additional config as per the Repeater Bridge instructions

What clients will see is three SSID's:

  1. "MyNetwork", channel 6, key "secret" (the original network)
  2. "MyNetwork", channel 6, key "secret" (the DD-WRT repeated network)
  3. "MyVap", channel 6, key "myVapKey" (the virtual access point of the DD-WRT)

When clients are configured with the SSID "MyNetwork" and key "secret" they will transparently connect to either the original (1) and repeated (2) networks. How the client handles this depends on the client, and in my experience this works smooth with most devices. When moving away from the original AP and toward the DD-WRT, eventually the client will detect that the wi-fi signal is low, search for a new access point and connect to the repeater. And vice versa.

The virtual access point (3) is not necessary for this to function, but it's practical if you want to make sure that you're connecting to the DD-WRT and not the original gateway.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.